64

I must apologize.
After pulling my complete email records I see I did use the spammed address for a forum account.
Thankfully the Reg data base is stored separately, though that’s little relief to forum participants that were spammed or even worse have been compromised with malware.
I would think best practice would be to make member list function unavailable for general parsing.